Intelligent CISO Issue 07 | Page 77

decrypting myths Five tips for an effective proactive approach to cybersecurity Research from Verizon revealed that 68% of cyberbreaches take more than six months to discover and 76% of breaches are financially motivated. It has prompted calls for businesses to take a more proactive approach to cybersecurity. Ali Neil – Director of International Security Solutions at Verizon, offers five tips for implementing an effective strategy. W e know that cybercrime is a real business risk today; seemingly every week another report of a major data breach emerges. With so much at stake if a breach is incurred – loss of customer data, intellectual property, brand reputation and more – companies need to adopt a risk-based approach to invest wisely and prioritise how they allocate their budgets. They need to think about the holistic end-to-end purpose of their security operating model to counter this risk and spend their money wisely and to greatest effect. Hackers do not alert businesses to their presence. In fact, the Verizon 2018 Data Breach Investigations Report (2018 DBIR) found that 68% of breaches took months or longer to discover and alarmingly 87% of the breaches examined had data compromised within minutes or less of the attack taking place. www.intelligentciso.com | Issue 07 The ultimate aim of cybercrime is not random; security controls shouldn’t be random either. Our findings saw 76% of breaches are financially motivated with 13% of breaches motivated by the gain of strategic advantage (espionage). The security industry as a whole has a responsibility to help businesses take a more proactive approach to their security. Increasing confidence through education and helping them to understand the threats they face are the initial steps to implementing solutions that will be effective in the prevention of cybercrime. Five key guidelines for businesses in monitoring and combating this daily threat of cybercrime are as follows: 1. Know your risk posture and change your security strategy accordingly Research shows that 90% of board members do not understand the cyber-risk profile of their business and 77